Researchers examined a vulnerability in Drupal that could have left thousands of websites compromised. Last week, researchers examined the attack in more detail, measuring the time it would take to compromise a website completely. The attacks, called Drupalgeddon by some, took advantage of flaws in an API used by Drupal, which ironically, was designed to prevent SQL Injection attacks. The attack observed by Trustwave’s researchers originated from a location in Freemont, California. The vulnerability was used to add a new administrator account with a preset password.”]